CIAM Operations Lead / Site Reliability Engineering (SRE) Lead

Application Deadline:

Address:

Job Family Group:

The CIAM Operations Lead / SRE Lead is responsible for ensuring the reliability, availability, security, scalability, and operational excellence of Customer Identity and Access Management (CIAM) platforms. The role leads day-to-day operations, production support, automation initiatives, platform modernization efforts, and Site Reliability Engineering practices across critical identity services supporting customer authentication, authorization, MFA, SSO, consent management, and digital onboarding journeys.

This individual will be responsible for platform stability, incident management, observability, infrastructure lifecycle management, security compliance, and continuous service improvement while partnering closely with Development, Security, Infrastructure, Architecture, and Business stakeholders. Responsibilities align closely with CIAM Engineering & Operations activities such as infrastructure management, deployments, vulnerability remediation, monitoring, and 24x7 operational support.

Key Responsibilities

Site Reliability & Service Ownership

• Own the operational health, availability, performance, and resilience of CIAM platforms.
• Define and maintain SLIs, SLOs, and error budgets for critical customer identity services.
• Drive adoption of SRE practices, reliability engineering standards, and operational excellence principles.
• Lead capacity planning, performance tuning, and resiliency testing.
• Ensure high availability architectures, disaster recovery readiness, and failover capabilities.

Production Operations Leadership

• Lead 24x7 operational support for CIAM services and platforms.
• Manage major incidents, problem management activities, and root cause analysis efforts.
• Coordinate production support across engineering, infrastructure, security, and vendor teams.
• Establish operational runbooks, support procedures, and knowledge management practices.
• Drive continuous improvement initiatives based on incident trends and operational metrics.

CIAM Platform Engineering

• Provide technical leadership for CIAM technologies including: IBM Security Verify Access (ISVA/ISAM)Identity Directories and LDAP servicesWebSphere / Application PlatformsOAuth 2.0, OpenID Connect, SAMLMFA and Adaptive AuthenticationAPI Security and Gateway integrations
• Review solution designs and architecture proposals to ensure supportability and operational readiness.

Automation & Platform Modernization

• Champion Infrastructure-as-Code and automation-first operational practices.
• Eliminate manual operational activities through tooling and self-service capabilities.
• Define and maintain enterprise monitoring and observability standards.
• Develop proactive alerting, anomaly detection, dashboards, and operational reporting.
• Improve signal-to-noise ratio and reduce false-positive alerts.

Security & Compliance

• Ensure compliance with cybersecurity policies, regulatory requirements, and audit standards.
• Lead vulnerability remediation and platform currency initiatives.
• Oversee security controls for customer identity data and authentication services.
• Partner with Security and Risk teams during audits, assessments, and regulatory reviews.

Release & Change Management

• Lead production deployments and release management activities.
• Ensure successful execution of maintenance windows and platform upgrades.
• Implement DevSecOps and CI/CD best practices.
• Review deployment readiness and post-implementation validation activities.

Leadership & Stakeholder Management

• Lead and mentor Operations Engineers and SRE team members.
• Foster a culture of accountability, reliability, automation, and continuous learning.
• Collaborate with Development, Architecture, Product, Security, and Infrastructure teams.
• Provide executive-level communication regarding service health, incidents, risks, and improvement initiatives.

Required Qualifications

Education

• University degree in Computer Science, Engineering, Information Technology, or a related discipline.
• Relevant industry certifications are considered an asset.

Experience

• 6+ years of experience supporting enterprise IAM/CIAM platforms.
• 3+ years of experience providing technical leadership for enterprise-scale platforms and complex engineering initiatives.
• Experience managing mission-critical customer-facing applications.
• Experience operating large-scale, highly available authentication and authorization platforms.

Technical Skills

• CIAM/IAM technologies (ISVA, ISAM, or equivalent)
• OAuth 2.0, OpenID Connect, SAML
• Linux and middleware administration
• WebSphere, LDAP
• Knowledge of AWS, Azure, or GCP cloud platforms.
• Strong knowledge of CI/CD pipelines, GitHub, Infrastructure as Code, and cloud-native technologies.
• Ansible, Terraform, Python, Shell scripting
• Hands-on experience with enterprise monitoring and observability platforms such as Dynatrace, Splunk, Grafana, and AppDynamics.
• Experience with AIOps tools, event management platforms, and intelligent automation solutions.

Success Metrics

The CIAM Operations Lead / SRE will be measured on:

• Platform reliability, resiliency, and operational stability.
• SLA/SLO attainment
• MTTR reduction
• Incident reduction and prevention
• Automation adoption and operational efficiency gains through AIOps capabilities.
• Team engagement and capability development
• Drive measurable contributions toward BMO's Ambition 2030 objectives through innovation, accountability, automation, and engineering excellence.

This role combines traditional Operations leadership with modern Site Reliability Engineering practices to deliver secure, resilient, highly available CIAM services that support critical digital banking and customer identity journeys.

Salary:

Pay Type:

The above represents BMO Financial Group’s pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group’s expected target for the first year in this position.

BMO Financial Group’s total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: https://jobs.bmo.com/global/en/Total-Rewards

About Us

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmo.com/ca/en.

BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.